Privacy Policy
Effective date: June 11, 2026 Last updated: June 11, 2026
This Privacy Policy explains how Mattox Engineering LLC collects, uses, and protects personal information through the public website at mattoxengineering.com. This policy covers the public marketing website, contact and assessment requests, chat, newsletter signup, consent-gated analytics, and related operational systems. Consulting and managed-service engagements are governed by separate written agreements.
1. Who we are
This site, mattoxengineering.com, is operated by Mattox Engineering LLC ("Mattox Engineering", "we", "us"), a US-based managed-services and DevOps consultancy.
- Registered address: 1812 33rd Ave, Sterling, IL 61081
- Privacy contact: privacy@mattoxengineering.com
- General contact: hello@mattoxengineering.com
For purposes of applicable privacy laws, Mattox Engineering is the data controller for the personal data described here. Mattox Engineering is US-based and does not intentionally target EU/UK individuals through the public website. We have not appointed an EU/UK Article 27 representative. Mattox Engineering may work with non-US business customers under separate written contracts.
2. What we collect
2.1 Lead / assessment form data
When you submit a contact or free-assessment request, respond to a popup that captures an email, or provide details through our chat widget, we collect what you provide. In practice this may include:
- Name
- Work email
- Company
- Role
- Phone
- The business issue, project context, or free-text message you submit
- A chat quick-reply you selected, if you came through chat
- Your chat conversation, including messages you send and the transcript of that conversation
- Attribution metadata attached automatically to your submission, such as the page you submitted from, referrer host, UTM campaign parameters, and the plan you were viewing if you came from pricing
We do not ask for, and do not want, sensitive personal information in free-text fields.
2.2 Newsletter email
If you subscribe to our newsletter, we collect your email address. Subscription is double opt-in: we email you a confirmation link and you are added only after you click it. The confirmation timestamp is our record of consent.
2.3 Analytics (only if you consent)
We run analytics with self-hosted PostHog. Analytics is off until you opt in through the cookie banner. Before consent, no PostHog cookie is set and no analytics data is sent.
If you opt in, we collect:
- Page views and product events, such as CTA clicks, form starts, popup views, and similar site interactions
- A pseudonymous analytics ID, which is a random identifier and not your name or email
- Device and browser information
- Approximate performance information such as Core Web Vitals
- Your IP address as seen by the analytics system
We do not put your raw email, name, phone, or company into analytics. Where an email needs to be referenced for analytics, it is stored only as a one-way SHA-256 hash. Because PostHog is self-hosted on infrastructure we control, this analytics data is not shared with a third-party analytics company and is not sold.
2.4 Operational / server data
To run the site securely, we process server and edge logs, including IP addresses, for security, abuse prevention, troubleshooting, and rate-limiting. We also use strictly necessary cookies for the admin area and for recording your cookie consent choice. See the Cookie Policy.
3. How we use it, and our legal basis
| What we do | Why | Lawful basis where applicable |
|---|---|---|
| Respond to your assessment or contact request | You asked us to evaluate or respond to your inquiry | Legitimate interest and/or consent |
| Send you the newsletter | You opted in through double opt-in | Consent |
| Run analytics | Understand and improve the site | Consent |
| Keep server and edge logs, rate-limit, and prevent abuse | Security and reliability | Legitimate interest |
We do not use your data for automated decision-making that produces legal effects, and we do not use it for third-party advertising.
4. Who processes data for us
We use a small set of service providers and self-hosted systems. We do not sell personal data.
| Processor / system | What it does | Notes |
|---|---|---|
| Cloudflare | DNS, CDN, WAF, TLS termination, edge caching, and related security services | Sees request metadata and IP addresses at the edge |
| AWS SES (Amazon Simple Email Service) | Sends transactional, lifecycle, and newsletter email | Email content includes recipient address and message body |
| Cloudflare R2 | Object storage for images and media uploaded by admins | Admin-uploaded media only; no visitor PII is intentionally stored here |
| Self-hosted PostHog | Consent-gated product analytics | Self-operated on Mattox Engineering infrastructure in Illinois, United States |
Kubernetes hosting and PostHog are self-hosted from Mattox Engineering's Illinois offices and are not third-party hosting processors. As of the Last Updated date, no other third-party tools receive website lead, contact, or newsletter data. Cloudflare and AWS data processing terms are approved.
5. How long we keep it
- Lead / assessment data: inactive leads are retained for 90 days, unless we need a longer period for an active business relationship, legal obligation, dispute, or separate written agreement. On an erasure request, or once a lead is no longer needed, we anonymize the lead record by removing identifying fields and linked chat transcript content while keeping non-identifying aggregate reporting fields.
- Newsletter subscribers: kept until you unsubscribe. If you ask to be forgotten through the unsubscribe flow, the subscriber record is hard-deleted.
- Analytics: retained for 90 days in our self-hosted PostHog project settings.
- Server / edge logs: retained for 90 days.
6. Your rights
Depending on where you live and which laws apply, you may have rights over your personal data, including access, deletion, correction, opt-out, restriction, portability, and objection.
California (CCPA/CPRA): we do not sell or share your personal information as those terms are defined under California law, and we do not process it for cross-context behavioral advertising. You may exercise access, deletion, and correction rights, and you will not be discriminated against for doing so.
You can withdraw analytics consent at any time using the "Cookie settings" link in the footer. You can unsubscribe from the newsletter at any time using the link in any newsletter email.
To exercise privacy rights, email privacy@mattoxengineering.com.
7. International processing
The public website is operated from the United States. Website, contact, newsletter, and analytics data may be processed in the United States by Mattox Engineering and the processors listed in this policy. Our self-hosted PostHog analytics environment is hosted in Mattox Engineering's Illinois offices. Mattox Engineering may work with non-US business customers under separate written agreements, and those engagements are governed by their contract terms.
8. Cookies
We use a small number of cookies and similar browser storage. Strictly necessary cookies always run. Analytics cookies run only with your consent. See the full Cookie Policy.
9. Children
This is a business-to-business site directed at engineering and IT professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.
10. Changes to this policy
We may update this policy. We will revise the Last Updated date above. For material changes, such as adding a new processor or a new cookie category, we may re-prompt for cookie consent.
11. Contact
Questions about this policy or your data: privacy@mattoxengineering.com or hello@mattoxengineering.com. Postal: 1812 33rd Ave, Sterling, IL 61081.